Privacy policy
1. Data controller
Ruppel GmbH Kerbelweg 1 5316 Leuggern Canton of Aargau, Switzerland Represented by: Sergej Ruppel, Managing Director Commercial register no.: CH-400.4.450.410-0 Business identifier (UID): CHE-259.122.055
Email: immo-ruppel@outlook.com
Phone: +41 78 613 12 70
2. Principles of data processing
We process your personal data only insofar as this is necessary for providing our services, you have consented, or a legal basis permits it. We only collect the data that is necessary for the respective purpose (data minimisation principle under Art. 5(1)(c) GDPR and Art. 6(3) FADP).
3. Hosting & server logs
Our website is hosted by Vercel Inc. (440 N Barranca Avenue #4133, Covina, CA 91723, USA). Vercel processes personal data exclusively on our behalf (data processing under Art. 28 GDPR) and a corresponding data processing agreement is in place. When you visit our website, technical information is automatically stored in server log files: IP address, browser type, operating system, referrer URL, date and time of access and amount of data transferred. This data serves the technical operation, security and stability of the website. It is not merged with other data sources. Log files are automatically deleted after 30 days. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, performant delivery) and Art. 31(1) FADP.
4. Contact form & email contact
If you contact us via the contact form or by email, the data you provide (name, email address, message content) will be stored to process your inquiry. Email delivery is handled by our service provider Resend (Resend, Inc., 2261 Market Street #4456, San Francisco, CA 94114, USA). Resend processes the data exclusively on our behalf under a data processing agreement. We do not pass this data on to third parties without your consent. Inquiries are deleted after completion of correspondence and expiry of statutory retention periods (generally after 3 years).
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in answering your inquiry); Art. 31(2)(a) FADP.
5. Booking system (Smoobu)
For online bookings and availability inquiries we use the Smoobu service (Smoobu GmbH, Wattstrasse 11, 13355 Berlin, Germany). The booking widget is embedded into our website via iFrame. When booking, Smoobu processes your booking data (name, email, phone, travel dates, payment information where applicable) on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Only upon active interaction with the booking widget may technical cookies be set by Smoobu that are required for the booking process to function. You can find Smoobu's privacy policy at smoobu.com/privacy. Legal basis: Art. 6(1)(b) GDPR (contract initiation and performance).
6. Web analytics (Vercel Analytics & Speed Insights)
We use Vercel Analytics and Vercel Speed Insights to capture anonymised usage statistics and technical performance data (Core Web Vitals). These services operate cookielessly — no cookies are set and no personal identifiers are stored. Only aggregated data such as page views, device class, country and load times are collected.
Processing is carried out by Vercel Inc., USA, on our behalf. Attribution to your person is technically not possible. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reach measurement and performance optimisation). As no cookies and no personal identifiers are used, no separate consent is required.
7. Cookies
Our website does not set any cookies of its own for tracking or advertising purposes. We do not use marketing cookies, tracking pixels or social media plugins.
Only when calling up the booking widget (see Section 5) may technical cookies be set by Smoobu that are essential for the booking process to function. These fall under the "strictly necessary cookies" exemption (Art. 5(3) sentence 2 ePrivacy Directive) and do not require separate consent.
8. Transfer to third countries (USA)
Within the scope of the above services (Vercel, Resend), personal data is transferred to the USA. Since the EU-US Data Privacy Framework (in force since July 2023), the USA is generally recognised as a safe third country provided the respective recipients are certified. Where no adequacy decision applies, we base the transfer on the EU Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR; these are part of our data processing agreements.
9. Your rights as a data subject
You have the following rights regarding your personal data: • Right of access (Art. 15 GDPR; Art. 25 FADP) • Right to rectification of inaccurate data (Art. 16 GDPR; Art. 32 FADP) • Right to erasure (Art. 17 GDPR; Art. 32 FADP) • Right to restriction of processing (Art. 18 GDPR) • Right to data portability (Art. 20 GDPR; Art. 28 FADP) • Right to object to processing based on legitimate interests (Art. 21 GDPR) • Right to withdraw consent with effect for the future
To exercise these rights an informal notification is sufficient to immo-ruppel@outlook.com.
Right to lodge a complaint with the supervisory authority: • Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern (edoeb.admin.ch) • EU: any competent national data protection authority at your habitual residence.
10. Data security
Our website is delivered exclusively over an encrypted HTTPS connection (TLS). We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. These include access restrictions, regular security updates and the selection of processors with a demonstrably high security standard.
11. Retention period
We store personal data only for as long as is necessary for the respective purpose or as required by statutory retention obligations: • Server log files: 30 days • Contact inquiries: until completion of correspondence, max. 3 years • Booking data: 10 years after end of contract (Art. 957–958f Swiss Code of Obligations) • Web analytics data: exclusively aggregated/anonymised, with no personal reference
12. Applicable law & version
This privacy policy is governed by the Swiss Federal Act on Data Protection (FADP / revFADP in force since 1 September 2023) and, where applicable to persons resident in the EU, by the EU General Data Protection Regulation (GDPR).
Last updated: May 2026. We reserve the right to amend this privacy policy in case of changes to the legal situation or our processing activities. The current version is available at https://swisshillstay.ch/en/datenschutz.